NETGEAR Routers - Remote Code Execution

NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow...

D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code Execution

man-group/dtale 3.10.0 contains an authentication bypass and remote code execution caused by improper input validation and a hardcoded SECRETKEY in Flask configuration, letting attackers forge session cookies and execute arbitrary code, exploit requires attacker to access the application. id:...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE starting from 11.9 does not properly validate image files that were passed to a file parser, resulting in a remote command execution vulnerability. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for...

Drupal - Remote Code Execution

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. id: CVE-2018-7600 info: name: Drupal - Remote Code Execution author:...

Burp_CVE-2025-31324

Extensão Burp Suite CVE-2025-31324 Visão Geral Esta extensão do Burp Suite baseada em Python foi projetada para detectar a presença da CVE-2025-31324 , uma vulnerabilidade crítica no componente Metadata Uploader do SAP NetWeaver Visual Composer. A vulnerabilidade permite a execução remota de códi...

gstreamer1-plugins-good security update

An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

Zoneminder

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in full Remote Code Execution RCE as the web server user. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

CVE-2024-37032

CVE-2024-37032 Path traversal in Ollama con server di registro malintenzionato Scopri di più su Probllama: vulnerabilità di esecuzione remota di codice in Ollama CVE-2024-37032 – Panoramica e mitigazioni Ambiente di vulnerabilità root@kitploit: docker run -d -v ollama:/root/.ollama -p 11434:11434...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 ist eine schwerwiegende Sicherheitslücke, die QNAP Network Attached Storage NAS-Geräte betrifft. Die Schwachstelle beruht auf der unsicheren Verwendung der strcpy-Funktion in der Funktion NoSupportACL des share.cgi-Skripts im QTS-Betriebssystem, was zu einem...

cve-2019-6250-lab

CVE-2019-6250 — laboratorio RCE pre-autenticazione libzmq Catena RCE funzionante end-to-end + laboratorio riproducibile per CVE-2019-6250 , l'heap-buffer-overflow pre-autenticazione in libzmq's v2decodert::sizeready. Un overflow aritmetico di puntatore uint64t consente a un peer non autenticato d...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE स्टैक ओवरफ़्लो → RCE लैब CVE-2019-13132 के लिए पूर्ण-अंत तक काम करने वाला RCE एक्सप्लॉइट + पुनरुत्पादन योग्य लैब, जो libzmq के CURVE INITIATE हैंडशेक हैंडलर में स्टैक बफ़र ओवरफ़्लो है। एक हमलावर जो सर्वर की दीर्घकालिक सार्वजनिक कुंजी जो डिज़ाइन के अनुसार एक...

CVE-2024-25600

CVE-2024-25600 बिना प्रमाणीकरण के रिमोट कोड निष्पादन – Bricks उपयोग: python3 bricks.py उदाहरण: python3 bricks.py https://example.org संदर्भ: https://github.com/Chocapikk/CVE-2024-25600...

CVE-2026-49160-CVE-2026-47291-HTTP.sys

CVE-2026-49160 e CVE-2026-47291 PoC HTTP.sys Vulnerabilità Denial of Service di HTTP.sys Vulnerabilità di Esecuzione Remota di Codice di HTTP.sys A causa delle restrizioni di dimensione dei file di GitHub, i video dimostrativi per questo PoC CVE-2026-49160 sono ospitati come allegati nelle Releas...

CVE-2025-55182-Lab

Laboratório CVE-2025-55182 Um laboratório prático para explorar CVE-2025-55182 React2Shell - Execução Remota de Código em Componentes de Servidor React. ⚠️ Aviso Legal Apenas para fins educacionais. Teste apenas em sistemas que você possui. Início Rápido root@kitploit: Clone and start git clone...

log4j-cve-2021-44228-sample

Esempio di exploit log4j Questo repository contiene un esempio funzionante di abuso del recente exploit log4j. Non esegue un vero e proprio codice remoto, ma mostra la facilità con cui un attaccante può far sì che un'applicazione vulnerabile chiami il proprio server ldap. Utilizza l'eccellente ap...

apche_unomi_rce

CVE-2020-13942 भेद्यता के बारे में मूल ब्लॉग पोस्ट: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ यहाँ दो RCE वेक्टर हैं: MVEL इंजेक्शन के माध्यम से और OGNL इंजेक्शन के माध्यम से। दोनों वेक्टर अलग-अलग कोड को लक्षित करते हैं, हालाँकि पेलोड अपेक्षाकृत सम...

CVE-2023-37941

सुपरसेट के डिफ़ॉल्ट कैश में पिकल RCE का शोषण जानकारी root@kitploit: लेखक Dinis Cruz परियोजना Superset विवरण Apache का Superset कैशिंग के लिए विभिन्न विकल्प प्रस्तुत करता है, ये सभी Flask-Caching पर आधारित हैं। एक अंतर्निहित कैश प्रदान किया जाता है जो बाद में पुनर्प्राप्ति के लिए मानों को क्रमबद्ध...

CVE-2024-21762-Checker

CVE-2024-21762-Checker Dieses Skript führt Schwachstellenscans für CVE-2024-21762 durch, eine Schwachstelle zur Remote-Codeausführung in Fortinet SSL VPN. Es prüft, ob ein bestimmter Server anfällig für diese CVE ist, indem es spezifische Anfragen sendet und die Antworten analysiert. Weitere...

CVE-2022-1388-rs

CVE-2022-1388-rs Scanner e shell interattiva per CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE scritto in Rust Riepilogo Per riepilogare, ecco una panoramica delle condizioni necessarie di una richiesta per sfruttare questa vulnerabilità: L'header Connection deve includere X-F5-Auth-Token...